Behavioral task
behavioral1
Sample
DoxBite.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DoxBite.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
�W��z?�.pyc
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
�W��z?�.pyc
Resource
win10v2004-20240221-en
General
-
Target
DoxBite.exe
-
Size
10.6MB
-
MD5
dc75ee7ae88b8914fa4c6e0057dcc52b
-
SHA1
8f796264d1aaa426bd96c884bcf0bc870253d266
-
SHA256
c34a51fba903a59c5f5ffd0cf42a87d0b1624157a20ea1e9b80b03a65a598d7d
-
SHA512
615c080a3435cc1b68721c50c5222bd9fff21c93ad139cabbc50f184f11db5df5a0f085c1eab57933dad0058c581ee9fe48f4ee7664e6ee0cd77521a11113bce
-
SSDEEP
196608:l62ikYK79PCwaHK0IumWtN6OjmFwDRxtYSHdK34kdai7bN3m5SE+SC:lAkfdeBVK2pM9B3QQo
Malware Config
Signatures
-
A stealer written in Python and packaged with Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/�W��z?�.pyc blankgrabber -
Blankgrabber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DoxBite.exe
Files
-
DoxBite.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
�W��z?�.pyc